nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-10-03 13:30:36 +00:00
Code Issues Packages Projects Releases Wiki Activity

libxslt: Fix use-after-free in xsltApplyTemplates

Browse Source 
Fixes: CVE-2021-30560
(cherry picked from commit 54806020fa)
This commit is contained in:
Martin Weinelt
2022-02-20 20:26:47 +01:00
parent 2fed8cd950
commit a406844445
1 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
pkgs/development/libraries/libxslt/default.nix
View File

@@ -1,4 +1,4 @@
{ lib, stdenv, fetchurl
{ lib, stdenv, fetchurl, fetchpatch
, pkg-config
, libxml2, findXMLCatalogs, gettext, python3, libgcrypt
, cryptoSupport ? false
@@ -14,6 +14,15 @@ stdenv.mkDerivation rec {
sha256 = "0zrzz6kjdyavspzik6fbkpvfpbd25r2qg6py5nnjaabrsr3bvccq";
};
patches = [
(fetchpatch {
# Fixes use-after-free in xsltApplyTemplates
name = "CVE-2021-30560.patch";
url = "https://gitlab.gnome.org/GNOME/libxslt/-/commit/50f9c9cd3b7dfe9b3c8c795247752d1fdcadcac8.patch";
sha256 = "sha256-XJD9SBo8xzztQQ6g13h4IzID7HV7u3xWSQdb2rVCJBQ=";
})
];
outputs = [ "bin" "dev" "out" "man" "doc" ] ++ lib.optional pythonSupport "py";
nativeBuildInputs = [